GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, flux-source-controller, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melang...

GHSA-389R-GV7P-R3RP vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

CVE-2026-45022 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, cerbos, goreleaser, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, coder-fips, cg, src-fingerprint,...

CLEANSTART-2026-FO49462 Security fixes for ghsa-3xc5-wrhm-f963 applied in versions: 1.31.1-r0

Security vulnerability affects the pulumi-language-yaml package. This issue is resolved in later releases. See references for vulnerability details...

GHSA-HFVC-G4FC-PQHX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, tekton-pipelines, pulumi-language-java, tfsec, restic, gatekeeper, juicefs, datadog-operator, dagger, gitlab-pages, hubble, kubevela, prometheus, rancher-agent, vitess, zarf, cloudprober, distribution,...

CVE-2026-39883 vulnerabilities

Vulnerabilities for packages: eks-distro, aws-fsx-csi-driver-fips, volsync-fips, longhorn-manager-fips, spegel, blob-csi-fips, volsync, chainctl, opentelemetry-operator, flux-source-controller-fips, crossplane-provider-azure-orbital, openbao-fips, trivy, thanos-receive-controller-fips,...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, flux-source-controller-fips, cerbos, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, cg, src-fingerprint...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, flux-source-controller-fips, cerbos, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, cg, src-fingerprint...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: zarf-fips, google-osconfig-agent, argocd-image-updater, chainctl, flux-source-controller-fips, cerbos, bom, trivy, grafana-alloy, amazon-ssm-agent-fips, packer-fips, argo-events, crossplane, dagger, trivy-fips, trufflehog, apko, osv-scanner, nemo, cg, src-fingerprint...

GHSA-JHF3-XXHW-2WPP vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, flux-source-controller, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melang...

GHSA-GM2X-2G9H-CCM8 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, flux-source-controller, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melang...

CVE-2026-34165 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, flux-source-controller, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melang...

CVE-2026-33762 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, bom, tfsec, snyk-cli, pulumi-language-dotnet, zot, dagger, grafana-alloy, kubevela, zarf, scorecard, pulumi, k9s, flux-source-controller, syft, grype, kargo, external-secrets-operator, gitea, nuclei, src-fingerprint, melang...

CVE-2026-27142 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, pulumi-language-java, tfsec, restic, gatekeeper, gitlab-pages, kubevela, lvm-driver, prometheus, rancher-agent, authservice, vault-benchmark, zarf, timoni, cloudprober, knative-operator, kubernetes-csi-external-provisioner, spicedb, cilium,...

CVE-2026-27141 vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, tekton-pipelines, pulumi-language-java, vertical-pod-autoscaler, gitlab-pages, kube-vip, zarf, tigera-operator, timoni, k3s, crossplane-provider-aws-s3, kubo, melange, dex, terraform-provider-acme, gitlab-runner, chezmoi, opentelemetry-collector...

GHSA-8FJ7-8H3W-XWFM vulnerabilities

Vulnerabilities for packages: pulumi-language-yaml, tekton-pipelines, pulumi-language-java, vertical-pod-autoscaler, gitlab-pages, kube-vip, zarf, tigera-operator, timoni, k3s, crossplane-provider-aws-s3, kubo, melange, dex, terraform-provider-acme, gitlab-runner, chezmoi, opentelemetry-collector...

GHSA-Q9HV-HPM4-HJ6X vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, tfsec, dagger, kubevela, zarf, crossplane-provider-keycloak, flux-source-controller, docker-cli-buildx, crossplane-provider-aws-s3, cert-manager-cmctl, melange, crossplane,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, pulumi-language-yaml, pulumi-language-java, tfsec, dagger, kubevela, zarf, crossplane-provider-keycloak, flux-source-controller, docker-cli-buildx, crossplane-provider-aws-s3, cert-manager-cmctl, melange, crossplane,...

CVE-2026-1229 vulnerabilities

Vulnerabilities for packages: argo-rollouts-fips, crossplane-provider-aws-sqs, crossplane-provider-aws-kms, argocd-image-updater, chainctl, flux-helm-controller, flux-source-controller-fips, cerbos, goreleaser, omnictl-multiarch, openbao-fips, trivy, openbao, grafana-alloy, amazon-ssm-agent-fips,...

CVE-2024-24786 vulnerabilities

Vulnerabilities for packages: capslock, trivy, metrics-server-fips, temporal-ui-server-fips, crossplane-provider-aws-iam, kustomize, ferretdb, crossplane, crossplane-provider-aws-s3, falcosidekick-fips, osv-scanner, golangci-lint, hubble, velero, newrelic-infra-operator, ctop, grpcurl,...